The threat of fraud and cyber scams is a 365-days-a-year problem when it comes to online shopping.
But just as the rate at which retailers hit you with promo emails scales up at this time of year, so too does the risk of falling foul of criminals trying to access your bank account.
According to the National Cyber Security Centre (NCSC), shoppers lost more than £10m to cyber criminals over last year’s festive shopping period.
With Black Friday sales under way and Christmas on the horizon, Sky News enlisted some cybersecurity experts to offer advice on how best to stay safe and avoid scams this year.
Spotting a dodgy email
A favourite tactic of fraudsters is to draw you in with an email that looks remarkably legitimate, seemingly offering an exclusive deal at one of your favoured retailers.
It is, as Mike McLellan of Secureworks puts it, a “classic scenario we’d expect to see around Black Friday”.
An important thing to look out for is the domain name of the sender’s email address – is it a close match, but with something slightly off? Think @amaz0n.co.uk, for example.
“On smartphones, that kind of detail is usually hidden,” advises Mr McLellan. “So tap on it and check where the email has come from.”
Advertisement
You should also keep an eye out for misspellings and odd formatting.
However, the NCSC has warned that criminals are likely to use increasingly accessible AI tools to produce even more convincing scam emails, websites, and adverts than usual.
If you’re at all unsure, it’s good practice to go to the website directly, rather than click on any links in the email.
Fake websites
Some scams may direct you to a retailer’s login page to enter your account information.
It could look perfectly normal, and you go ahead and pop in your username and password, while in the background, criminals capture that information and use it themselves.
Chris Bluvshtein, of VPNOverview, says: “Every website should have a valid security certificate, and you can tell by the little padlock icon next to the URL.
“If a website doesn’t have one of these, then don’t give your bank details or valuable information.”
These can be some of the hardest scams to notice yourself, but banks have become very good at alerting you to “unusual logins” and flagging any subsequent dodgy transactions.
“If you suspect something bad has happened, consider changing your password,” Mr McLellan says. “And checking your bank activity.”
Text message scams
Another classic of the Black Friday scam genre is a text message suggesting you have a parcel waiting with DHL, Royal Mail, or some other delivery provider.
“Quite often you will be expecting something when you get these texts – but again keep an eye out for anything that doesn’t look normal,” says Mr McLellan.
A good indicator that something is amiss is if the text asks you for payment and includes a bit.ly link.
You should not click on these.
The rise of ‘Qishing’
An emerging threat over the past year is an extension of phishing using QR codes.
Secureworks has dubbed it “Qishing”, when criminals use them to direct unsuspecting consumers to fraudulent websites that could steal their personal information.
Director of threat intelligence, Rafe Pilling, says: “We’re so used to seeing ‘scan this code’ to register, view a menu, order drinks or food to a table, or even enter competitions via the big screen at events stadiums, that consumers are thinking less about what they’re actually scanning.
“As the hype around holidays like Black Friday drives more urgency in consumer actions, we can expect to see more cyber criminals taking advantage with Qishing.”
Password managers and mobile payments
Modern smartphones and web browsers offer some useful baked-in features to help you stay safe.
Both have password managers and generators, which will come up with randomised options for you to lock your accounts and then store those behind a master password – or even biometrics like facial or fingerprint recognition.
Consider multifactor authentication as well, says Mr McLellan, for an extra layer of security.
Apple and Google Pay are good payment options if the retailer accepts them, as they protect your bank details.
“It’s best to use them instead of your debit card,” says Mr Bluvshtein.
Black Friday promotions will often try to entice you with limited time deals, alerting you to them via an app notification, text message or email.
If one arrives while you’re out and about, it could be tempting to jump straight to it.
But shopping on public wi-fi networks, like those you might find at railway stations and on trains, is a bad idea, according to Mr Bluvshtein.
“Public wi-fi rarely has safety protocols such as passwords in place, and hackers can piggyback and steal unsecured banking details and sensitive information without you knowing,” he says.
What to do if you suspect you’ve been scammed
Even with the best will in the world, there may come a moment where you suspect the worst.
But try not to fret – there are steps you can take to limit the damage, or prevent any from occurring at all.
“Keep an eye on bank accounts and if you see anything unusual, get in touch with them,” says Mr McLellan.
“Banks have got very robust fraud controls these days – and that’s why it’s best to use credit cards if possible.
“If you think any of your online accounts have been compromised, change the password, and try not to reuse them across different retailers.
“We do recognise that some of these have a technical bar to them, but if nothing else, at least keep an eye on what’s happening and be vigilant about your online activity.”
Former Manchester United and Scotland footballer Denis Law has died, at the age of 84.
In a statement, his family said: “It is with a heavy heart that we tell you our father Denis Law has sadly passed away. He fought a tough battle, but finally, he is now at peace.
“We would like to thank everyone who contributed to his wellbeing and care, past and much more recently.
“We know how much people supported and loved him and that love was always appreciated and made the difference.”
The Aberdeen-born footballer previously announced in August 2021 that he had been diagnosed with dementia.
A prolific striker, Law scored 237 goals in 404 appearances for Manchester United, for whom he signed for a then-British record transfer fee in 1962.
He is the only man to have two statues dedicated to him at Old Trafford – one on the Stretford End concourse, the other as part of the United Trinity statue overlooking the stadium’s forecourt beside fellow great George Best and Sir Bobby Charlton.
The only Scottish player to have won the Ballon d’Or award, in 1964, he was also part of United’s triumphant campaign in the 1968 European Cup – in which they became the first English club to ever win the competition.
In a statement, the club said: “Everyone at Manchester United is mourning the loss of Denis Law, the King of the Stretford End, who has passed away, aged 84.
“He will always be celebrated as one of the club’s greatest and most beloved players.
“The ultimate goalscorer, his flair, spirit and love for the game made him the hero of a generation. Our deepest condolences go out to Denis’s family and many friends. His memory will live on forever more.”
Wayne Rooney, former United captain and the club’s all-time record goalscorer, described Law as a “legend”.
“Thoughts with all Denis’s family and friends,” he said in an online post.
Another former United captain, Gary Neville, said: “A great footballer and a great man. It’s a privilege and an honour to have spent time in your company. The King of the Stretford End.”
A tribute from the Scotland national team said Law was “a true great”.
“We will not see his likes again,” it said.
Law also played for Huddersfield Town, Manchester City, and Italian club Torino during his club career, and made 55 appearances for Scotland, scoring 30 goals for his country.
Manchester City said in a post on X: “The whole of Manchester, including everyone at City, is mourning with you. Rest in peace, Denis.”
The weakened pound has boosted many of the 100 companies forming the top-flight index.
Why is this happening?
Most are not based in the UK, so a less valuable pound means their sterling-priced shares are cheaper to buy for people using other currencies, typically US dollars.
This makes the shares better value, prompting more to be bought. This greater demand has brought up the prices and the FTSE 100.
The pound has been hovering below $1.22 for much of Friday. It’s steadily fallen from being worth $1.34 in late September.
Also spurring the new record are market expectations for more interest rate cuts in 2025, something which would make borrowing cheaper and likely kickstart spending.
What is the FTSE 100?
The index is made up of many mining and international oil and gas companies, as well as household name UK banks and supermarkets.
Familiar to a UK audience are lenders such as Barclays, Natwest, HSBC and Lloyds and supermarket chains Tesco, Marks & Spencer and Sainsbury’s.
Other well-known names include Rolls-Royce, Unilever, easyJet, BT Group and Next.
If a company’s share price drops significantly it can slip outside of the FTSE 100 and into the larger and more UK-based FTSE 250 index.
The inverse works for the FTSE 250 companies, the 101st to 250th most valuable firms on the London Stock Exchange. If their share price rises significantly they could move into the FTSE 100.
A good close for markets
It’s a good end of the week for markets, entirely reversing the rise in borrowing costs that plagued Chancellor Rachel Reeves for the past ten days.
Fears of long-lasting high borrowing costs drove speculation she would have to cut spending to meet self-imposed fiscal rules to balance the budget and bring down debt by 2030.
Please use Chrome browser for a more accessible video player
3:18
They Treasury tries to calm market nerves late last week
Long-term government borrowing had reached a high not seen since 1998 while the benchmark 10-year cost of government borrowing, as measured by 10-year gilt yields, was at levels last seen around the 2008 financial crisis.
The gilt yield is effectively the interest rate investors demand to lend money to the UK government.
Only the pound has yet to recover the losses incurred during the market turbulence. Without that dropped price, however, the FTSE 100 record may not have happened.
Also acting to reduce sterling value is the chance of more interest rates. Currencies tend to weaken when interest rates are cut.
A Nazi-obsessed man has been jailed for attempted murder after he stabbed an asylum seeker in a terrorist attack.
Callum Parslow was handed a life sentence and will serve a minimum of 22 years and eight months in prison after he knifed the man at a Worcestershire hotel on 2 April last year, as a “protest” against small boat crossings.
The victim, Nahom Hagos, from Eritrea, said it was a “miracle” he survived after being stabbed in the chest and hand.
Parslow, 32, has Hitler’s signature tattooed on his arm and used a £770 knife he had bought online to attack Mr Hagos when he was eating in the conservatory of the Pear Tree Inn at Hindlip.
During sentencing, the judge, Mr Justice Dove, told Parslow: “You committed a vicious and unprovoked assault on a complete stranger Nahom Hagos who suffered devastating injuries as a result of your violence.”
The judge also said Parslow, from Worcester, was “motivated by your adoption of a far-right neo-Nazi mindset which fuelled your warped, violent and racist views”, and added: “This was undoubtedly a terrorist attack.”
Leicester Crown Court heard at the time that Mr Hagos, who used to live at the hotel, was visiting a friend and was stabbed after Parslow asked him for directions to the toilet.
CCTV from the scene showed Mr Hagos fleeing to a car park and being chased by Parslow. He was able to run back into the main reception area, where the hotel manager locked the front door.
Parslow later re-entered through another door apparently searching for further victims, the court heard.
The hotel manager and a builder used a van to take Mr Hagos to hospital in Worcester, as they felt he was losing too much blood, where he was found to have an 8cm-long wound which had not penetrated any of his vital organs.
After trying to kill Mr Hagos, Parslow ran towards a canal and was spotted with what appeared to be blood on his hands.
Officers found blood containing a DNA profile matching that of the victim on the blade of the knife abandoned by Parslow.
Failed manifesto post
After the stabbing and as police closed in, Parslow tried to post a “terrorist manifesto” on X, tagging Tommy Robinson and politicians including Nigel Farage, Suella Braverman and Sir Keir Starmer.
He wrote that he “just did my duty to England” and had tried to “exterminate” Mr Hagos. However, it failed to send as he copied in too many people.
Others on his list included Laurence Fox, Lee Anderson, Boris Johnson, Donald Trump and various news organisations.
Nazi memorabilia at bedsit
During the trial last October, the court heard an axe, metal baseball bat and a second knife were found at Parslow’s bedsit in Bromyard Terrace in Worcester.
Police also discovered a swastika armband, a Nazi-era medallion and copies of Hitler’s book Mein Kampf.
Jurors were also told Parslow had Hitler’s signature tattooed on his arm “in order to demonstrate his affiliation to the ideals of the leader of the German Nazi party”.
He also pleaded guilty to an unconnected sexual offence and two charges of sending electronic communications with intent to cause distress and anxiety at the time.